SOC 2 Analyst

Logicalis GmbH; Beachwood (OH); On-site; USD 65,000 - 83,000; Full time

Job summary

Logicalis is seeking a Security Specialist in the United States to manage services for Managed Security Service customers. The role involves discovering, assessing, and directing remediation of security threats within client environments, working as part of a managed security team on various cyber security projects and tasks.

You will collaborate with Solution Architects, DevOps, Security Engineers, SOC Analysts and clients, providing Tier 2 analysis and escalation support, while mentoring

Qualifications

• Bachelor’s Degree in a related field.
• 5+ years’ experience in cybersecurity, SOC, MSSP or mature security ops.
• Hands-on with SIEMs: Microsoft Sentinel, Splunk.
• Experience with endpoint/XDR and cloud monitoring.
• Strong incident analysis, triage and reporting.
• Familiar with MITRE ATT&CK and IR frameworks.
• Excellent communication and teamwork.

Responsibilities

• Handle internal and client escalations with stakeholders.
• Maintain SOC policies and procedures.
• Analyze SOC tools configuration and dashboards.
• Develop SOPs for security events.
• Perform threat intelligence gathering.
• Hunt for suspicious activity.
• Support incident management and escalation.
• Mentor junior colleagues.
• Prepare detailed reports on investigations.

Skills

SOC experience

Threat analysis

Analytical skills

Communication skills

Education

Bachelor's degree

Tools

Microsoft Sentinel

Splunk

Cisco XDR

MISP

SOAR

Job description

Summary The Security Specialist role is responsible for managing services for Managed Security Service customers. The Security Specialist has the remit of discovering, assessing and directing remediation of security threats & vulnerabilities within client environments whilst working as part of a managed security team on various cyber security projects and tasks. This role involves working at all levels with Solution Architects, Development Operations, Security Engineers, SOC Analysts, clients and other stakeholders in building and managing security architecture and systems which are kept up-to-date and relevant in the rapidly evolving Managed Security Services industry. This is a technical SOC role and the role holder is expected to provide Tier 2 analysis and escalation support across managed security services, while supporting, mentoring and coaching junior colleagues. There will also be a requirement to liaise with clients, internal teams, channel partners and vendors.

Essential Duties and Responsibilities

• Handles internal and client escalations by engaging with key stakeholders.
• Follows published SOC policies and procedures.
• Works alongside subject matter experts across the Managed Security Service portfolio and be able to clearly articulate deliverables, limitations, feasibility, etc.
• Analyzes configuration, tuning, and maintenance of SOC tools to improve detective capability and building re-usable visualisations / dashboards for security alert triage, threat hunting and similar use cases, etc.
• Develops Standard Operating Procedures (SOPs) and use cases for monitoring and handling different types of security events.
• Performs threat intelligence gathering to ensure that detection methods are effective against current threats.
• Hunts for suspicious activity based on anomalous activity.
• Handles events as part of the Security Incident Management Process.
• Works with both internal and external partners to investigate and advise on security incidents and anomalies.
• Prepares detailed reports, providing information on findings, status and progress of investigations, as well as vulnerability and risk factors.
• Serves as the technical escalation point and mentor for junior colleagues.
• Produces incident response playbooks to drive a consistent approach to handling common incidents and improve operational processes.
• Analyses structured security log data through the creation of aggregated / correlated reports or visualizations.
• Identify and implement opportunities for innovative and continuous improvement.
• Demonstrates and actively promotes an understanding and commitment to the mission of Logicalis through performing behaviors consistent with the organization's values.
• Maintains a working knowledge of applicable Federal, State, and Local laws and regulations as well as policies and procedures of Logicalis in order to ensure adherence in a manner that reflects honest, ethical and professional behaviors.
• Supports and conducts self in a manner consistent with customer service expectations.

Supervisory Responsibilities

This job has no supervisory responsibilities.

Qualifications

To perform this job successfully, an individual should be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Education/Experience/Technical Requirements/Certifications Equivalent combination accepted. Education: Bachelor’s Degree in a related field. Experience / Technical Requirements Previous hands-on experience working in SOC environments is mandatory. Experience working within managed services, including SLAs, KPIs, operational reporting and continuous service improvement. Strong incident analysis and incident handling experience, including triage, escalation, containment support and structured documentation. Experience with SIEM platforms such as Microsoft Sentinel and/or Splunk. Knowledge of MITRE ATT&CK and common incident response frameworks. Experience with endpoint and XDR technologies is a strong plus, particularly Cisco XDR and Microsoft Defender. Experience with MISP, n8n or SOAR platforms is a plus. Ability to collaborate with Tier 1 analysts, engineers, threat intelligence teams and customer stakeholders. Excellent analytical and problem-solving skills, with the ability to work under pressure and maintain attention to detail. Excellent written and oral communication skills, with the ability to document findings clearly and communicate operational status effectively. Self-motivated, outcome-focused and committed to continual service improvement.

Certifications

Certifications Certifications from Microsoft, Splunk and GIAC are highly valued, for example Microsoft SC-200, Microsoft SC-100, Splunk Core Certified Power User, Splunk Enterprise Certified Admin, GIAC GCIH, GCIA, GCFA or GNFA.

Other Skills and Abilities

Typically 5+ years of experience in cybersecurity, including significant experience in SOC, MSSP or mature internal security operations environments. Hands-on experience analyzing security logs from SIEM, EDR/XDR, endpoint, identity, cloud and network security sources. Experience with Microsoft Sentinel and/or Splunk is highly valued. Experience with Cisco XDR, MISP, n8n and security automation/orchestration is highly valued. Experience with Azure and/or AWS security monitoring is valued. Awareness of security standards and frameworks such as ISO 27001, NIST, MITRE ATT&CK and common vulnerability management practices.

Physical Demands

The physical demands described here are representative of those that should be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this Job, the employee is constantly required to sit, talk, see, hear, and use hands and arms. The employee is frequently required to stand; move about, climb steps or balance and stoop, kneel, crouch, or crawl. The employee may occasionally lift and/or move up to 10 pounds. The above statements describe the general nature and level of work being performed by individuals assigned to this classification. This is not intended to be an exhaustive list of all responsibilities and duties required of personnel so classified.

Equal Opportunity Employer

Logicalis is an Equal Opportunity Employer. It is our policy to employ people who are qualified by reason of education, training, experience, and demonstrated performance. We value inclusion and belonging at our company. We do not discriminate on the basis of race, color, religion, national origin, sexual orientation, gender identity and gender expression, marital status, age, height, weight, disability, veteran status, or any other reason prohibited by applicable federal or state laws. NOTE: It is Logicalis’ practice that when a client requires medical testing, the employee must accept that requirement as a condition of their assignment and either submit to the tests or show proof they’ve completed the test satisfactorily (i.e., TB Test negative).

Salary Compensation Range: $64,603 - $83,000/yr.

LogicalisUS Benefits Summary

Logicalis is an international solutions provider of digital services currently accelerating the digital transformation of its 10,000 customers around the world. Through a globally connected network of specialist hubs, sector-leading experts (in education, financial services, government, healthcare, manufacturing, professional services, retail and telecommunications) and strategic partnerships (including Cisco, Microsoft, HPE, IBM, NetApp, Oracle, ServiceNow, and VMware), Logicalis has more than 6,500 employees focused on understanding customer priorities and enhancing their experience. As Architects of ChangeTM, Logicalis’ focus is to design, support, and execute customers’ digital transformation by bringing together their vision with its technological expertise and industry insights. The company, through its deep knowledge in key IT industry drivers such as Security, Cloud, Data Management and IoT, can address customer priorities such as revenue and business growth, operational efficiency, innovation, risk and compliance, data governance and sustainability. Logicalis Group, with annual revenues of $ 1.5 billion annually, maintains operations in Europe, North America, Latin America, Asia Pacific and Africa and is part of Datatec Group, which is listed on the Johannesburg Stock Exchange (JSE:DTC), with revenues of more than $ 4.1 Billion.